Re: [Trisquel-users] Trisquel allowing remote login as root?

2016-06-10 Thread greatgnu
openssh-server is installed by default on Debian. I am pretty sure on Trisquel 7 only the client (not the server) is there on a default installation.

Re: [Trisquel-users] Trisquel allowing remote login as root?

2016-06-09 Thread t8mf4nu6lizp
Not sure in which version it got changed. Looks like the bug is filed against version 6 for what it's worth.

Re: [Trisquel-users] Trisquel allowing remote login as root?

2016-06-09 Thread gnuser
Thanks. So, supposedly it is not installed by default in Trisquel 7? Only in 6? I think this was a fresh install, not an update... hum... Might be mistaken. Anyway.

Re: [Trisquel-users] Trisquel allowing remote login as root?

2016-06-09 Thread t8mf4nu6lizp
The ssh server used to be part of the default install but it no longer is. https://trisquel.info/en/issues/11188

Re: [Trisquel-users] Trisquel allowing remote login as root?

2016-06-09 Thread gnuser
I can't be 100% sure at this point, but I don't remember installing the server on my laptop and it is installed (just checked). So I assume it was in the default intallation. Again, I can't be 100% sure, maybe I installed and forgot it, though it's weird seeing I NEVER used ssh. If some more

Re: [Trisquel-users] Trisquel allowing remote login as root?

2016-06-09 Thread enduzzer
Absolute openBSD says: You're offered a chance to disable root logins over SSH. Use this default. The root account should never be permitted to log in via SSH, unless using public key authentication, and even then, those logins should be restricted. For the reasons to avoid root logins

Re: [Trisquel-users] Trisquel allowing remote login as root?

2016-06-08 Thread gnuser
From the manual: PermitRootLogin Specifies whether root can log in using ssh(1). The argument must be “yes”, “prohibit-password”, “without-password”, “forced-commands-only”, or “no”. The default is “prohibit-password”. If this option is set to “prohibit-password” or

Re: [Trisquel-users] Trisquel allowing remote login as root?

2016-06-08 Thread gnuser
I am planning on doing that, though it really is not all important (I have my firewall blocking access on SSH port anyway). What worried me was that if this is the default, people are at danger when making a fresh install of Trisquel, AND if it is NOT the default, I might have done something

Re: [Trisquel-users] Trisquel allowing remote login as root?

2016-06-08 Thread dguthrie
Delete SSH then. I have a feeling that "StrictModes Yes" might stop it, though. No idea.

[Trisquel-users] Trisquel allowing remote login as root?

2016-06-08 Thread gnuser
Hey. So, following my issue of my laptop using too much CPU, I decided to take a look at security and noticed that running RKHunter gave me a warning on SSH login. I noticed that /etc/ssh/sshd_config had these 2 lines: "PermitRootLogin without_password" "StrictModes Yes" I immediately